Product:
Windows UI XAML Maps
Summary
A race condition in Windows UI XAML Maps MapControlSettings allows an authorized attacker to elevate privileges locally. This vulnerability occurs due to improper synchronization when executing concurrent processes using shared resources. Attackers can exploit this flaw to gain higher access rights within the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-54913 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the system and be able to execute concurrent processes that interact with the shared resources of the Windows UI XAML Maps. By carefully timing their actions, the attacker can manipulate the race condition to gain elevated privileges.
Affected Products
- Windows UI XAML Maps: Affected by improper synchronization leading to potential privilege escalation.
Mitigation
To mitigate this vulnerability, users should ensure that their systems are updated with the latest security patches from Microsoft. Additionally, limiting local access to trusted users can help reduce the risk of exploitation.